A denial of service flaw was found in the way the TLS/SSL protocol definedprocessing of ALERT packets during a connection handshake. A remote attackercould use this flaw to make a TLS/SSL server consume an excessive amount of CPUand fail to accept connections form other clients. Multiple flaws were found in the way gnutls processed OpenPGP certificates. Anattacker could create specially crafted OpenPGP certificates which, when parsedby gnutls, would cause it to crash